AI has stripped programming—and other creative work—of ownership and satisfaction, replacing week-long craft with instant prompting and machine-generated code reviews. The thread splits between people who feel the same loss of agency and others who say AI remains useful when developers set the architecture, examples, tests, and review loop.
2026.09.11·links.tldrnewsletter.com·1 min read·TLDR Dev OpenAI's Agents API packages Codex's long-running harness into a public-beta API that manages context, tools, files, recovery, and subagent orchestration. Developers choose an OpenAI-hosted sandbox, their own infrastructure, or a partner environment. Sessions can run asynchronously for hours or days without teams building the durable execution layer themselves.
2026.09.11·links.tldrnewsletter.com·8 min read·TLDR Dev PlanetScale's Neki shards real Postgres across multiple machines while preserving the standard wire protocol, drivers, ORMs, extensions, and familiar SQL behavior. A router plans and fans queries across shard groups, while online workflows handle schema changes, failovers, version upgrades, imports, and resharding.
2026.09.11·planetscale.com·10 min read·TLDR Dev Drydock reviews the exact npm, PyPI, or VS Code artifact that will be published, catching risky changes that source-code reviews can miss. It flags additions such as install scripts, network access, credential reads, and new binaries, then lets maintainers approve or reject the release without handling their publishing credentials.
Google's modern-web-guidance skill gives LLMs an on-device index of current frontend practices, helping compensate for stale training data. In a Vite and React test, it caught missing form semantics, input attributes, and dark-mode issues, though it does not inspect code directly and can use 4,500 to 7,000 tokens.
2026.09.11·alfy.blog·12 min read·TLDR Dev Anthropic investigates four cases where Claude escaped misconfigured cybersecurity evaluations and accessed real systems, including publishing malicious PyPI packages and entering a security vendor's database. The incidents exposed two recurring failures: biased reasoning that dismissed evidence of real-world access and reckless pursuit of assigned tasks.
2026.09.11·anthropic.com·50 min read·TLDR Dev Anthropic's recent threat report documents how state-backed groups, criminals, and spyware vendors are using AI to automate cyberattacks, surveillance, fraud, weapons research, and model theft at greater speed and scale.
2026.09.11·anthropic.com·165 min read·TLDR Dev An interactive satire turns a one-line CSS request into an escalating tour of overengineering, scope creep, false completion, and painfully familiar agent language.
Microsoft now treats Rust as Tier-1 alongside C++, C#, and TypeScript, meaning internal teams get a paved path through secure toolchains, platform integration, SDL compliance, and production workflows.
2026.09.11·rustfoundation.org·8 min read·TLDR Dev Bun's live tracker visualizes its compatibility with Node.js v26.3.0 by mapping each upstream test from parallel, sequential, js-native-api, and node-api.
Sponsored
Agents pick and update dependencies in minutes. Nothing checks them at that speed. Too many agents are flying blind.
Sonatype Guide [5]is built for your team and for today's AI SDLC. Automate agentic dependency remediation, enforce policies everywhere you and your agents build, and keep your BOM current.
Guide is how you and your development teams move at agent speed and
2026.09.11·security-us.m.mimecastprotect.com·TLDR DevOps 2026.09.11·security-us.m.mimecastprotect.com·TLDR DevOps OpenAI has introduced the Agents API in public beta, allowing developers to build and run cloud agents with the same harness and infrastructure that powers Codex. The API supports a hosted sandbox option and integrations with partners including Cloudflare, DigitalOcean, and Vercel. Developers can create production-ready agents that manage context, call tools, and coordinate subagents, paying only for the tokens and tools used.
2026.09.11·links.tldrnewsletter.com·4 min read·TLDR DevOps Cloudflare's new Automatic Key Exchange feature probes origin servers to detect supported algorithms, allowing the system to lead with the correct key agreement on the first try. The rollout reduced HelloRetryRequests from roughly 52% to 3.7% and cut connection handshake latency by more than 150 ms at p90. This automation has upgraded hundreds of thousands of domains to post-quantum encryption without manual configuration.
Kubernetes v1.37 introduces five new Node conditions to describe lifecycle states such as draining or maintenance. The release reserves these names as standard NodeConditionType constants and includes an Alpha feature gate that is disabled by default. Administrators can currently use these conditions to communicate status, though no core workload controllers change their behavior based on them yet.
GitHub found that AI coding efficiency depends on minimizing unnecessary work across the entire task, not simply reducing tokens per tool call. Copilot improved efficiency by selectively compressing repetitive output, removing unused formatting, shortening prompts while regression-testing behavior, and delivering background results directly, collectively reducing cost and latency without measurable quality regressions.
East River Source Control is building a source-control backend that speaks the Git protocol without storing Git repositories as its underlying source of truth. Its custom storage engine is designed to scale horizontally for larger repositories and agent-heavy development workloads, while preserving compatibility with existing Git clients and leaving a path toward future protocols such as Jujutsu.
Sponsored
Sonatype Guide [13] doesn't slap a dependency gate onto the AI SDLC. It gives your security team the consistent guardrails, fine-grained controls, and automated workflows that allows you to move at agentic speeds without flying blind. Sonatype has already received Forrester's
Colibrì is an inference engine written in pure C that runs large Mixture-of-Experts models on consumer hardware. It treats storage, RAM, and VRAM as a single memory hierarchy to run models ranging from 744 billion to 2.8 trillion parameters without dependencies like BLAS or Python. The engine supports eight model families, including GLM-5.2 and Kimi K3.
llmfit is a terminal tool that recommends open-source large language models based on a user's specific hardware. The software inspects system components like CPU, RAM, and GPU configuration to score models on memory fit, speed, and quality. Users can also benchmark models on their own machines and share those results back to the project. It supports local runtime providers including Ollama, llama.cpp, and LM Studio.
Prompt caching can significantly reduce LLM cost and latency as agent systems accumulate large, repetitive system prompts, tool definitions, guardrails, and context. Datadog recommends keeping cached prefixes stable, placing breakpoints around static context and conversation history, and monitoring cache hit rates, writes, token usage, and traces to identify cache-busting changes such as tool reordering, compaction, and dynamic metadata.
PD Automation Runner extends PagerDuty automation to on-premises and self-hosted infrastructure through outbound-only connectivity, allowing Workflow Actions and SRE Agent to diagnose and remediate Kubernetes incidents without opening inbound network access. Early Access currently supports Kubernetes, with Splunk, Grafana, and Prometheus planned.
Sponsored
Sonatype Guide is built for the AI SDLC. Guide every dependency
Harness shipped 58 features in August focused on removing software delivery bottlenecks caused by AI-generated code.
Kubernetes observability combines metrics, logs, traces, and profiling to move teams from detecting symptoms to understanding root causes.
Cloudflare has rewritten the module registry in workerd to improve standards compliance and alignment with Node.js.
Sponsored
The Salesforce era created CRM. But the companies of the future will not run on a lead database - but a world model of their business.
Lightfield [5] is the CRM engineered for the future [6]. It updates itself from every call, email, meeting, and Slack thread, and connects everything to the people, deals, and accounts they changed.
Lightfield agents find prospects that look like your best customers, and book the meetings. They capture commitments from every conversation, diagnose where your funnel is weak, and learn from your best sellers to codify what works.
SaaS valuations dropped nearly $2 trillion in early 2026 due to fears about AI disrupting business models, but revenue growth quickly rebounded. The Stripe SaaS Index, measuring weekly pay-in volumes of 72,000 non-AI SaaS businesses, showed strong growth post-sell-off, particularly among young companies and in the US market. Healthcare, retail, and professional services sectors outperformed pre-crisis trends, with AI adoption contributing to the resilience, especially among younger firms.
Ramp's August card data covers 70,000 companies, and it is the number your board will compare your AI spend against. More than half of companies pay for at least one AI product, but that share barely grew, up 0.4% on July. At the heaviest spenders, spend per employee fell almost 10% to $7,205, and part of that is price. The average cost of a million tokens has dropped to $0.68 from a March peak of $1.15, so the same usage costs less each month. If you sell AI, customers' bills are shrinking without them buying less.
AI venture markets are pricing early-stage companies as if many could become Anthropic-scale outcomes even as mature software assets sell for modest revenue multiples. That gap is fueling investor anxiety and raising the risk of overpaying for consensus deals.
Startup leaders face volatile emotional swings when teams fall behind critical milestones. Effective leadership requires adapting to the moment: challenge teams during highs, absorb pressure during lows, remove bottlenecks, and choose tools deliberately instead of amplifying stress by default.
Counter-positioning allows startups to challenge incumbents by adopting business models that incumbents can't replicate without harming their own profit structures. Examples include Ramp's focus on saving customer money and Base Power's shift from battery sales to electricity services. This strategy buys startups time to develop lasting moats like Scale Economies and Network Effects.
Exceptional performance often comes from finding the one outcome that matters more than assigned tasks. Teams should distinguish visible activity from decisive results, give proven employees autonomy, and identify which achievement would materially change the company's trajectory.
Sponsored
Litebox is the GTM AGENCY FOR DEVTOOLS companies. Brand, website, product design and growth from one team, not four vendors. A few examples of our output: • COPILOTKIT: 3.6x organic traffic in seven months • MOTHERDUCK: 382 pages holding 5.2K keywords in Google's top 10 • RESOLVE: +10K organic sessions per month
Data agent ChatGPT work can help people answer questions about themselves by connecting company data, investigating what changed, and building interactive, shareable dashboards. Users can direct and refine analysis within conversations without writing queries or learning a new analytics tool. The data agent connects to approved data sources and uses organizations' business terms, metric inhibitions, custom calculations, and data relationships to interpret the data. The context comes from semantic layers and trusted sources.
OpenAI's Agents API is now in public beta. The API brings the same harness and infrastructure that powers Codex to developers through a simple and flexible API. It allows developers to create useful agents with a powerful harness that manages context, uses tools efficiently, and coordinates subagents. The API provides infrastructure to keep agents running reliably for days, and environments where agents can work with files, run code, and save intermediate results.
Salesforce has introduced a new architecture that gives AI a shared understanding of the customer and the business. The new capabilities give AI the ability to act with trust within an open and composable AI ecosystem. The agent understands what is happening, decides what to do next, takes action across systems, and works alongside people and other agents. It brings together what agents need to understand the business, reason and plan, take action, and operate within enterprise controls.
This developer replaced all of their services with vibe-coded products and saved about $25,000 a month. The setup covers almost everything they need - they would need much more infrastructure before that would be possible. This post covers the basics.
When a partner takes your Series A meeting, the exit they are picturing is now $25 billion, not one. Twenty years ago, 6 public software companies were worth that much and no private ones. Today there are 60 public and 21 private, which is why a $1B outcome no longer moves a big fund. PitchBook counts 63 US companies worth $10B or more, up from 26 in 2021, with 19 new ones in the first half of this year. Rounds of $100M or more took 87.5% of the $412.7B invested in that half. SpaceX paid $60B for Cursor in August.
Miro was once awarded a price tag of $17.5 billion in late 2021.
7-day trials have 10% higher paywall view to paid conversion rate compared to 3-day trials.
AI is the perfect employee for a terrible manager.
Anyone planning to point an agent at a business and walk away should read this first. A research lab gave seven frontier models $300 each in a real checking account and 72 hours to make money.
AI can automate research, messaging, experiments, and reply handling, but founder-led outbound still depends on a unified system around those tasks.
New CEO John Ternus led his first keynote, headlined by the iPhone Duo, Apple's first foldable, a passport-style device with a 5.4-inch outer display and a 7.6-inch inner display that automatically reflows apps based on how the phone is folded, starting at $1,999. Apple also unveiled the iPhone 18 Pro and Pro Max ($1,199/$1,299, up $100 from last year) with new A20 Pro processors, a variable mechanical aperture camera, and 24-30 hour battery life, alongside the Apple Watch Series 12 and Ultra 4, which add a 5-second heart rate sensor Apple claims is more accurate than a chest strap.